Skip to content
OpenAdvisories
Medium · 5.4 CVE-2019-14272 EUVD-2022-4365GHSA-jgw2-f5mx-rg7h

SilverStripe asset-admin Cross-site Scripting (XSS)

Published Sep 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: silverstripe/framework Ecosystem: Packagist

Description

In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist silverstripe/framework >= 4.0.0, < 4.3.5 4.3.5 GHSA-jgw2-f5mx-rg7h
Packagist silverstripe/framework >= 4.4.0, < 4.4.4 4.4.4 GHSA-jgw2-f5mx-rg7h

References